GoSecure Titan Labs research indicates that there is a gap between in-house security teams’ perceptions of the value of the security controls they implement, and the protection needed against most common attack vectors leveraged by penetration testers who challenge them based on real-world threat intelligence. This presentation will highlight two years of research into that disconnect, along with potential open-source tools and methods teams can consider to bridge the divide. Our analysis comes from a survey of 120 cybersecurity professionals and was compared with findings from penetration tests conducted across North America. By linking the defenders’ perceptions with their reported actions and cross-referencing the results with statistics on penetration testing, we uncovered important information gaps. Throughout the presentation, we’ll examine how much of the disparity might be caused by strategy and decision-making within the security organization, with a thoughtful examination of the human element that also drives these perceptions.
Search
Categories
Recent Posts
- Maximizing Employee Protection by Rethinking Expectations of Phishing Awareness and Email Security
- Hack to the future: The Attack Surface of GPS Signals
- Phishing may have just become a lot harder to detect…
- Beyond the Script: Attacker’s Sleep Schedule and Strategies Behind Automated Attacks
- Combating Advanced Cyber Threats: GoSecure’s Proactive Defense Against the Ivanti Connect Secure VPN Breach
- Merry and Secure: Unwrapping the Truth Around Malicious Hackers Activities During Holiday Season
- From Spraying and Praying to Custom Attacks: Different Playbooks for the Different Types of Malicious Actors Targeting RDP
- Enhancing Cyber Risk Dialogue: Lessons from SEC’s Recent Action